Home » Dell Manuals » Hubs & Switches » Dell C1048P Port Extender » Manual Viewer

Dell C1048P Port Extender Networking Command-Line Reference Guide for the C900 - Page 342

Extended MAC ACL Commands, deny

Get Dell C1048P Port Extender PDF manuals and user guides

View all Dell C1048P Port Extender manuals

Add to My Manuals
Save this manual to your list of manuals

Page 342 highlights

Extended MAC ACL Commands The following commands configure Extended MAC ACLs. The C9000 supports both Ingress and Egress MAC ACLs. When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit. NOTE: For more information, also refer to the Commands Common to all ACL Types and Common MAC Access List Commands sections. deny To drop packets that match the filter criteria, configure a filter. C9000 Series Syntax deny {any | host mac-address | mac-source-address mac-sourceaddress-mask} {any | host mac-address | mac-destination-address mac-destination-address-mask} [ethertype-operator] [count [byte]] [log [interval minutes] [threshold-in-msgs [count]] [monitor] To remove this filter, you have two choices: • Use the no seq sequence-number command if you know the filter's sequence number. • Use the no deny {any | host mac-address | mac-source-address mac-source-address-mask} {any | host mac-address | macdestination-address mac-destination-address-mask} command. Parameters any Enter the keyword any to drop all packets. host mac-address Enter the keyword host and then enter a MAC address to drop packets with that host address. mac-sourceaddress Enter a MAC address in nn:nn:nn:nn:nn:nn format. mac-sourceaddress-mask Specify which bits in the MAC address must match. The MAC ACL supports an inverse mask; therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly. mac-destination- Enter the destination MAC address and mask in address nn:nn:nn:nn:nn:nn format. Access Control Lists (ACL) 342

Section	Page
Dell Networking Command-Line Reference Guide for the C9000 Series Version 9.10(0.0)	3
About this Guide	48
Objectives	48
Audience	49
Conventions	49
Information Icons	49
CLI Basics	50
Accessing the Command Line	50
Multiple Configuration Users	51
Obtaining Help	51
Navigating the CLI	54
Using the Keyword no Command	54
Filtering show Commands	55
Command Modes	56
Control and Monitoring	67
asf-mode	69
banner exec	70
banner login	71
banner motd	73
cam-acl	74
cam-audit linecard	77
clear alarms	78
clear line	79
configure	80
debug cpu-traffic-stats	81
debug ftpserver	82
disable	83
do	84
enable	85
enable optic-info-update interval	86
end	87
exec-timeout	88
exit	89
ftp-server enable	90
ftp-server topdir	92
ftp-server username	93
hostname	94
ip ftp password	95
ip ftp source-interface	96
ip ftp username	97
ip http source-interface	98
ip telnet server enable	99
ip telnet source-interface	100
ip tftp source-interface	101
line	103
logging coredump server	104
login concurrent-session	105
login statistics	107
ping	109
power on	113
reload	113
send	114
service timestamps	115
show alarms	117
show asf	119
show chassis	120
show command-history	121
show console lp	123
show cpu-traffic-stats	124
show cpu-interface-stats	126
show debugging	129
show environment	130
show inventory	133
show linecard	135
show login statistics	139
show memory	142
show processes cpu	144
show processes ipc	148
show processes ipc flow-control	152
show processes memory	155
show rpm	162
show software ifm	165
show system linecard	167
show tech-support	168
show util-threshold cpu	181
show util-threshold memory	182
show version	184
telnet	187
terminal length	189
traceroute	190
undebug all	192
upload trace-log	193
util-threshold cpu	194
util-threshold memory	196
virtual-ip	197
write	199
File Management	200
boot system	201
cd	202
copy	203
delete	207
dir	209
format flash	211
mkdir	212
mount nfs	212
pwd	213
rename	214
restore factory-defaults	215
rmdir	216
show boot bmp	217
show boot system	218
show bootvar	219
show file	220
show file-systems	222
show os-version	224
show running-config	228
show startup-config	232
upgrade	233
verify	236
802.1X	238
debug dot1x	239
dot1x auth-fail-vlan	240
dot1x auth-server	241
dot1x auth-type mab-only	242
dot1x authentication (Configuration)	243
dot1x authentication (Interface)	244
dot1x critical-vlan	245
dot1x guest-vlan	246
dot1x host-mode	248
dot1x mac-auth-bypass	249
dot1x max-eap-req	250
dot1x max-supplicants	251
dot1x port-control	252
dot1x profile	253
dot1x quiet-period	254
dot1x reauthentication	255
dot1x reauth-max	256
dot1x server-timeout	257
dot1x static-mab	258
dot1x supplicant-timeout	259
dot1x tx-period	260
mac	261
show dot1x cos-mapping interface	262
show dot1x interface	264
show dot1x profile	267
Access Control Lists (ACL)	268
Commands Common to all ACL Types	269
remark	269
show config	270
Common IP ACL Commands	271
clear counters ip access-group	271
ip access-group	272
ip control-plane egress-filter	274
show ip accounting access-list	274
Standard IP ACL Commands	276
deny	276
ip access-list standard	278
permit	280
resequence access-list	282
resequence prefix-list ipv4	283
seq	285
show ip access-lists	287
Extended IP ACL Commands	289
deny	289
deny icmp	292
deny tcp	296
deny udp	299
ip access-list extended	302
permit	304
permit icmp	306
permit tcp	309
permit udp	312
resequence prefix-list ipv4	315
seq	316
ACL VLAN Group Commands	320
acl-vlan-group	320
cam-acl-vlan	321
description (ACL VLAN Group)	322
ip access-group (ACL VLAN Group)	323
member vlan (ACL VLAN Group)	323
show acl-vlan-group	324
show cam-acl-vlan	326
show running config acl-vlan-group	327
Common MAC ACL Commands	328
clear counters mac access-group	328
mac control-plane egress-acl	329
mac access-group	330
show mac access-lists	331
show mac accounting access-list	333
Standard MAC ACL Commands	334
deny	334
mac access-list standard	336
permit	338
seq	340
Extended MAC ACL Commands	342
deny	342
mac access-list extended	344
permit	346
seq	349
IP Prefix List Commands	351
clear ip prefix-list	351
deny	352
ip prefix-list	353
permit	354
seq	355
show config	357
show ip prefix-list detail	357
show ip prefix-list summary	359
Route Map Commands	360
continue	360
description	362
match as-path	362
match community	363
match interface	364
match ip address	366
match ip next-hop	367
match ip route-source	368
match metric	369
match origin	370
match route-type	371
match tag	372
route-map	373
set as-path	375
set automatic-tag	376
set comm-list delete	377
set community	378
set level	379
set local-preference	381
set metric	382
set metric-type	383
set next-hop	384
set origin	385
set tag	386
set weight	387
show config	388
show route-map	389
AS-Path Commands	390
ip as-path access-list	390
show ip as-path-access-lists	391
IP Community List Commands	392
ip community-list	392
show ip community-lists	393
Bidirectional Forwarding Detection (BFD)	395
bfd all-neighbors	395
bfd disable	397
bfd enable (Configuration)	398
bfd enable (Interface)	399
bfd interval	400
bfd protocol-liveness	401
ip route bfd	402
ipv6 ospf bfd all-neighbors	403
neighbor bfd	404
neighbor bfd disable	406
show bfd neighbors	407
vrrp bfd	409
Border Gateway Protocol	411
BGP IPv4 Commands	411
address-family	412
aggregate-address	413
bgp add-path	415
bgp always-compare-med	416
bgp asnotation	417
bgp bestpath as-path ignore	418
bgp bestpath as-path multipath-relax	419
bgp bestpath med confed	419
bgp bestpath med missing-as-best	420
bgp bestpath router-id ignore	421
bgp client-to-client reflection	422
bgp cluster-id	423
bgp confederation identifier	424
bgp confederation peers	425
bgp dampening	426
bgp default local-preference	428
bgp dmzlink-bw	429
bgp enforce-first-as	430
bgp fast-external-fallover	431
bgp four-octet-as-support	431
bgp graceful-restart	432
bgp log-neighbor-changes	434
bgp non-deterministic-med	434
bgp recursive-bgp-next-hop	435
bgp regex-eval-optz-disable	436
bgp router-id	438
bgp soft-reconfig-backup	439
capture bgp-pdu neighbor	440
capture bgp-pdu max-buffer-size	441
clear ip bgp	442
clear ip bgp dampening	443
clear ip bgp flap-statistics	445
clear ip bgp peer-group	447
debug ip bgp	448
debug ip bgp dampening	450
debug ip bgp events	451
debug ip bgp keepalives	452
debug ip bgp notifications	453
debug ip bgp soft-reconfiguration	454
debug ip bgp updates	455
default-metric	457
deny bandwidth	458
description	458
distance bgp	459
maximum-paths	460
neighbor activate	461
neighbor add-path	462
neighbor advertisement-interval	463
neighbor advertisement-start	464
neighbor allowas-in	465
neighbor default-originate	466
neighbor description	467
neighbor distribute-list	468
neighbor dmzlink-bw	469
neighbor ebgp-multihop	470
neighbor fall-over	471
neighbor filter-list	472
neighbor graceful-restart	473
neighbor local-as	474
neighbor maximum-prefix	475
neighbor next-hop-self	476
neighbor password	477
neighbor peer-group (assigning peers)	478
neighbor peer-group (creating group)	480
neighbor peer-group passive	481
neighbor remote-as	482
neighbor remove-private-as	483
neighbor route-map	484
neighbor route-reflector-client	485
neighbor send-community	486
neighbor shutdown	487
neighbor soft-reconfiguration inbound	488
neighbor subnet	489
neighbor timers	490
neighbor update-source	491
neighbor weight	492
network	493
network backdoor	495
permit bandwidth	496
redistribute	497
redistribute ospf	499
router bgp	500
set extcommunity bandwidth	501
show capture bgp-pdu neighbor	502
show config	503
show ip bgp	504
show ip bgp cluster-list	506
show ip bgp community	508
show ip bgp community-list	511
show ip bgp dampened-paths	513
show ip bgp detail	515
show ip bgp extcommunity-list	517
show ip bgp filter-list	519
show ip bgp flap-statistics	521
show ip bgp inconsistent-as	523
show ip bgp neighbors	524
show ip bgp next-hop	529
show ip bgp paths	530
show ip bgp paths as-path	532
show ip bgp paths community	533
show ip bgp peer-group	534
show ip bgp regexp	537
show ip bgp summary	539
show running-config bgp	542
timers bgp	542
MBGP Commands	543
debug ip bgp dampening	544
distance bgp	545
show ip bgp dampened-paths	546
BGP Extended Communities (RFC 4360)	548
deny	548
deny regex	549
description	550
ip extcommunity-list	551
match extcommunity	551
permit	552
permit regex	553
set extcommunity rt	554
set extcommunity soo	555
show ip bgp ipv4 extcommunity-list	557
show ip bgp paths extcommunity	558
show ip extcommunity-list	559
show running-config extcommunity-list	560
IPv6 BGP Commands	561
address-family	561
address family ipv6 unicast	562
aggregate-address	562
bgp always-compare-med	564
bgp bestpath as-path ignore	565
bgp bestpath med confed	565
bgp bestpath med missing-as-best	566
bgp client-to-client reflection	567
bgp cluster-id	567
bgp confederation identifier	568
bgp dampening	569
bgp default local-preference	570
bgp enforce-first-as	571
bgp fast-external-fallover	572
bgp four-octet-as-support	572
bgp graceful-restart	573
bgp log-neighbor-changes	574
bgp non-deterministic-med	575
bgp recursive-bgp-next-hop	575
bgp regex-eval-optz-disable	576
bgp router-id	577
bgp soft-reconfig-backup	578
capture bgp-pdu max-buffer-size	579
capture bgp-pdu neighbor (ipv6)	579
clear ip bgp ipv6-address	580
clear ip bgp * (asterisk)	581
clear ip bgp as-number	582
clear ip bgp ipv6 dampening	583
clear ip bgp ipv6 flap-statistics	584
clear ip bgp ipv6 unicast	585
clear ip bgp ipv6 unicast dampening	586
clear ip bgp ipv6 unicast flap-statistics	586
debug ip bgp keepalives	587
debug ip bgp ipv6 dampening	588
debug ip bgp ipv6 unicast peer-group updates	589
debug ip bgp ipv6 unicast dampening	589
debug ip bgp ipv6 unicast updates	590
debug ip bgp notifications	591
debug ip bgp updates	592
default-metric	593
description	593
distance bgp	594
ipv6 prefix-list	595
maximum-paths	596
neighbor activate	597
neighbor advertisement-interval	597
neighbor allowas-in	598
neighbor default-originate	599
neighbor description	600
neighbor distribute-list	601
neighbor ebgp-multihop	602
neighbor fall-over	602
neighbor filter-list	603
neighbor maximum-prefix	604
neighbor next-hop-self	605
neighbor peer-group (assigning peers)	606
neighbor peer-group (creating group)	607
neighbor peer-group passive	608
neighbor remote-as	609
neighbor remove-private-as	610
neighbor route-map	611
neighbor route-reflector-client	612
neighbor send-community	613
neighbor soft-reconfiguration inbound	613
neighbor subnet	614
neighbor shutdown	615
neighbor timers	616
neighbor update-source	617
neighbor weight	618
neighbor X:X:X::X password	619
network	619
network backdoor	621
redistribute	621
redistribute ospf	622
router bgp	624
show capture bgp-pdu neighbor	624
show config	625
show ip bgp next-hop	626
show ip bgp paths	626
show ip bgp paths as-path	627
show ip bgp paths community	628
show ip bgp paths extcommunity	628
show ip bgp regexp	629
show ipv6 prefix-list	630
show ip bgp ipv6 unicast	630
show ip bgp ipv6 unicast cluster-list	631
show ip bgp ipv6 unicast community	632
show ip bgp ipv6 unicast community-list	633
show ip bgp ipv6 unicast dampened-paths	633
show ip bgp ipv6 unicast detail	634
show ip bgp ipv6 unicast extcommunity-list	634
show ip bgp ipv6 unicast filter-list	635
show ip bgp ipv6 unicast flap-statistics	636
show ip bgp ipv6 unicast inconsistent-as	637
show ip bgp ipv6 unicast neighbors	637
show ip bgp ipv6 unicast peer-group	638
show ip bgp ipv6 unicast summary	639
timers bgp	640
IPv6 MBGP Commands	641
show ipv6 mbgproutes	641
Content Addressable Memory (CAM)	643
CAM Profile Commands	643
cam-acl (Configuration)	644
cam-acl-egress	647
cam-acl-egress-pe	648
cam-acl-pe	649
cam-optimization	650
show cam-acl	651
show cam-usage	651
show cam-acl-pe	655
show cam-acl-egress-pe	656
test cam-usage	657
Unified Forwarding Table Modes	658
show hardware forwarding-table mode	659
hardware forwarding-table mode	659
Control Plane Policing (CoPP)	661
clear control-traffic protocol	661
clear control-traffic queue	662
control-plane-cpuqos	664
service-policy rate-limit-cpu-queues	664
service-policy rate-limit-protocols	665
show control-traffic protocol	666
show control-traffic queue	669
show cpu-queue rate	670
show ip protocol-queue-mapping	672
show ipv6 protocol-queue-mapping	673
show mac protocol-queue-mapping	674
show protocol-queue-mapping	675
Data Center Bridging (DCB)	679